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Abstract. We produce a new family of polynomials f{X) over fields k 
of characteristic 2 which are exceptional, in the sense that f{X) — f{Y) 
has no absolutely irreducible factors in y] except for scalar multi- 
ples of X — Y; when k is finite, this condition is equivalent to saying that 
the map a ^ f[ot) induces a bijection on an infinite algebraic extension 
of k. Our polynomials have degree 2'^~^(2'^ — 1), where e > 1 is odd. 
We also prove that this completes the classification of indecomposable 
exceptional polynomials of degree not a power of the characteristic. 



1. Introduction 

Let A; be a field of characteristic p > 0, let f{X) G k[X]\k, and let k be an 
algebraic closure of k. A polynomial in k[X, Y] is called absolutely irreducible 
if it is irreducible in y]. We say / is exceptional if f{X) — f{Y) has 
no absolutely irreducible factors in y] except for scalar multiples of 
X — Y. If is finite, this condition is equivalent to saying that the map 
a fioi) induces a bijection on an infinite algebraic extension of A: [21 
[6]. Via this property, exceptional polynomials have been used to construct 
remarkable examples of various types of objects: curves whose Jacobians 
have real multiplication [33j . Galois extensions of number fields with group 
PSL2(g) [5], maximal curves over finite fields [21 [28], families of character 
sums with small average value [6] , difference sets [Oj [TT] , binary sequences 
with ideal autocorrelation [9], almost perfect nonlinear power functions [13[ 
[Ml [To], bent functions [35l[Il], and double-error correcting codes |10j. 

Trivially any linear polynomial is exceptional. The simplest nontrivial ex- 
amples are the multiplicative polynomials X'^ (which are exceptional when 
k contains no d-th roots of unity except 1) and the additive polynomials 
^ aiX^^ (which are exceptional when they have no nonzero root in k). Dick- 
son [7] showed that certain variants of these polynomials are also exceptional 
in some situations: the Dickson polynomials Dd{X,a) (with a £ k), which 
are defined by Dd{Y + a/Y, a) =Y'^ + (a/Y)'^; and the subadditive polyno- 
mials S{X), which satisfy S{X"^) = L{X)"^ with L an additive polynomial 
and m a positive integer. For nearly 100 years, the only known exceptional 
polynomials were compositions of these classical examples. 
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Klyachko [21] showed that compositions of these polynomials yield all 
exceptional polynomials of degree not divisible by p, and also all excep- 
tional polynomials of degree p. A vast generalization of this result was 
proved by Fried, Guralnick and Saxl which greatly restricted the pos- 
sibilities for the monodromy groups of exceptional polynomials. We re- 
call the relevant terminology: let x be transcendental over k. We say 
f{X) S k[X] \ k is separable if the field extension k{x)/k{f{x)) is separable, 
or equivalently f'{X) ^ 0. For a separable f{X) E k\X\ let E be the Galois 
closure of k{x)/k(f{x)). The arithmetic monodromy group of / (over k) is 
Gal(£'/A;(/(x))); the geometric monodromy group of / is Gal{E / £{f (x))) , 
where i is the algebraic closure of k in E. If k is finite, then the com- 
position 5 o c of two polynomials b,c £ k[X] is exceptional if and only if 
both b and c are exceptional [6J. Thus, the study of exceptional polyno- 
mials over finite fields reduces to the case of indecomposable polynomials, 
i.e., polynomials which are not compositions of lower-degree polynomials. 
For extensions of these results to infinite fields and to maps between other 
varieties, see |T8l [191 [22l [23] . Fried, Guralnick and Saxl proved the follow- 
ing result about the monodromy groups of an indecomposable exceptional 
polynomial [T5l [T8] : 

Theorem 1.1. Let k be a field of characteristic p, and let f{X) G k[X] be 
separable, indecomposable, and exceptional of degree d > 1. Let A be the 
arithmetic monodromy group of f. Then one of the following holds. 

(i) d ^ p is prime, and A is solvable. 

(ii) d = p^ and A has a normal elementary abelian subgroup V of order 
p\ 

(ifi) p G {2,3}, d = p'^ijf- - l)/2 with e > 1 odd, and A ^ PFLslp^) = 
PGL2(p") X Gal(Fpe/Fp). 

It remains to determine the polynomials corresponding to these group 
theoretic possibilities. Case (i) is completely understood: up to compositions 
with linear polynomials, one just gets the Dickson polynomials Dd{X,a) 
(see [26l Appendix] or [21]). In case (ii), we have G = VGi for some Gi; this 
case includes the additive polynomials (where Gi = 1) and the subadditive 
polynomials (where Gi is cyclic). In joint work with Miiller [161 I17j . we 
have found families of case (ii) examples in which Gi is dihedral [16[ ITT] . 
Moreover, in all known examples in case (ii), the fixed field E^ has genus 
zero; conversely, we show in [17J that there are no further examples in which 
E^ has genus zero or one. We suspect there are no other examples in case 
(ii): for if E'^ has genus g > 1 then Gi will be a group of automorphisms of 
E^ whose order is large compared to g, and there are not many possibilities 
for such a field E^ . We hope to complete the analysis of case (ii) in a 
subsequent paper. The present paper addresses case (iii). 

In the two years following [15], examples were found in case (iii) for each 
p £ {2,3} and each odd e > 1 [U [23l [25]. In the companion paper [20j . 
we show that twists of these examples comprise all examples in case (iii), 
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except possibly in the following situation: p = 2, G = SL2(2'^), and the 
extension k{x)/k{f{x)) is wildly ramified over at least two places of k{f{x)). 
In the present paper we conclude the treatment of case (iii) by handling this 
final ramification setup. In particular, we find a new family of exceptional 
polynomials. Our main result is the following, in which we say polynomials 
6, c G k[X] are k- equivalent if there are linear polynomials ^1,^2 £ ^[^] such 
that 6 = £1 o c o £2: 

Theorem 1.2. Let k he a field of characteristic 2. Let q = 2^ > 2. For 

a £ k \ ¥2, define 

where T{X) = + X^/^ + --- + X. Then the map a ^ fa defines a bijec- 
tion from /c \ F2 to the set of k-equivalence classes of separable polynomials 
f G k[X] of degree q{q — l)/2 satisfying 

(i) the geometric monodromy group of f is SL2(g); and 

(ii) the extension k{x)/k{f{x)) is wildly ramified over at least two places 
ofkifix)). 

Every is indecomposable. Moreover, f^ is exceptional if and only if e is 
odd and A: n Fg = F2 . 

The strategy of our proof is to identify the curve C corresponding to the 
Galois closure E of k{x)/k{f{x)), for / a polynomial satisfying (i) and (ii). 
It turns out that C is geometrically isomorphic to the smooth plane curve 

A key step in our proof is the computation of the automorphism groups 
of curves of the form v'^ + v = h{w), with h varying over a two-parameter 
family of rational functions. Our method for this computation is rather 
general, and applies to many families of rational functions h. 

As noted above. Theorem 11.21 completes the classification of non-affine 
indecomposable exceptional polynomials: 

Corollary 1.3. Let k be a field of characteristic p >0. Up to k-equivalence, 
the separable indecomposable exceptional polynomials over k which lie in 
cases (i) or (iii) of Theorem \l.l\ are precisely: 

(i) for any p, the polynomial X'^ where d ^ p is prime and k contains 
no d-th roots of unity except 1; 

(ii) for any p, the polynomial 

Vd/2\ 

Dd{X,a) := ^ 

i=0 

where d ^ p is prime, a £ k* , and k contains no elements of the 
form C + l/C with being a primitive d-th root of unity in k; 

(iii) for p = 2 and q = 2^ > 2 with e odd and A^PlF^ = F2, the polynomial 
fa{X) where q G /c \ F2; 
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(iv) forp = 2 and q = 2'^ > 2 with e odd and kCiFg = F2, the polynomial 



where n divides q + 1 and a £ k* ; 
(v) forp = 3 and q = 3^ > 3 with e odd and kn¥q = ¥3, the polynomial 

where n divides {q + l)/4: and a £ k* has image in k* /{k*)'^'"' of even 
order. 

The contents of this paper are as follows. In the next section we prove 
some useful results about ramification groups. In Section [3] we record results 
from [20] which describe the ramification (including the higher ramification 
groups) in E/k{f{x)). In Section [5] we classify curves which admit the 
group of upper triangular matrices in SL2(g), as a group of automorphisms 
with our desired ramification configuration. There is a two-parameter family 
of such curves. In Sections [5] and [6] we determine the automorphism groups 
of the curves in this family (which turn out to be either B or SL2(q')). The 
curves with automorphism group SL2(g) form a one-parameter subfamily. 
The group theoretic data yields the existence and uniqueness of the desired 
polynomials. In particular, it shows we cannot have k = F2; in Section [9] 
we give a different, more direct proof of this fact. In the final two sections 
we consider different forms of the curves, and in particular we determine 
a smooth plane model. We then use this model to explicitly compute the 
polynomials, and we conclude the paper by proving Theorem 11.21 and Corol- 



Notation. Throughout this paper, all curves are assumed to be smooth, 
projective, and geometrically irreducible. We often define a curve by giving 
an affine plane model, in which case we mean the completion of the nor- 
malization of the stated model. Also, in this case we describe points on the 
curve by giving the corresponding points on the plane model. 

A cover is a separable nonconstant morphism between curves. If />: C ^ 
P is a cover of curves over a field /c, by a 'branch point' of p we mean 
a point of I?(/c) which is ramified in p x^k (for k an algebraic closure 
of k). In particular, branch points need not be defined over k, but the 
set of branch points is preserved by the absolute Galois group of k. If 
/ G k[X] is a separable polynomial, then we refer to the branch points of 
the corresponding cover /: — > as the branch points of /. 

If /o: C — > 2? is a Galois cover, and P is a point of C, then the ramification 
groups at P (in the lower numbering, as in [30] ) are denoted /q {P) , Ii {P) , . . . , 




e-l 
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or simply /o,/i,.... Here Iq is the inertia group and Ii is its Sylow p- 
subgroup. We refer to h as the first ramification group, I2 as the second, 
and so on. 

We reserve the letter x for an element transcendental over the field k. 
Throughout this paper we write q = 2^ where e > 1. We use the following 
notation for subgroups of SL2((j'). The group of diagonal matrices is denoted 
T . The group of upper triangular matrices is denoted B. The group of 
elements of B with I's on the diagonal is denoted U . The two-element group 
generated by (01) is denoted W . Finally, T{X) denotes the polynomial 
X'?/2 + X<?/4 + . . . + X. 

2. Ramification in Galois p-power covers 

In this section we prove a useful result (Corollary I2.2p about ramification 
groups in Galois covers of degree a power of the characteristic. We give 
two proofs, each of which provides additional information. Throughout this 
section, i is an algebraically closed field of characteristic p > 0. 

Proposition 2.1. Let p: C ^T) and p' : C ^ B be Galois covers of curves 
over i. Let n and r be positive integers. Suppose that B = and the degree 
of p' is p^ . If all n-th ramification groups of p' are trivial, then the same is 
true of p. 

Proof. Since has no nontrivial unramified covers, and any ramified Ga- 
lois cover of p-power degree has a nontrivial first ramification group, the 
hypotheses imply n >2. Without loss, we may assume p has degree p. First 
assume C has genus greater than 1, so that Aut C is finite. Let H he a Sylow 
p-subgroup of AutC which contains Gal(/j'). By replacing p by one of its 
(Aut C)-conjugates, we may assume that H contains Gal(p) as well. Then 
the cover B C/H induced from C ^ C/H and C — > S is the composition 
of a sequence of Galois degree-p covers = i3o — > i3i ^ • • • — > Bm = C/H. 
Since ;B = P^, each Bi — > Bi+i has trivial second ramification groups (by 
Riemann-Hurwitz). Thus, each n-th ramification group of C — > Sj+i is also 
an n-th ramification group C ^ Bi (by [30] Prop. IV.3]). By induction, 
C — > Bm = C/H has trivial n-th ramification groups, whence the same is 
true of C — > P. 

If C has genus 0, then p is a degree-p cover between genus-0 curves and 
hence has trivial second ramification groups. 

Finally, assume C has genus 1. Pick a point of C with nontrivial inertia 
group under p', and let J be an order-p subgroup of this inertia group. Then 
C/J = P^, so by replacing B hy C/ J we may assume p' has degree p. Up > 3 
then no such p' exists (e.g., by Riemann-Hurwitz). If p = 3 then any Galois 
degree-p map C ^ P is either unramified (with T> of genus 1) or has a unique 
branch point (with I2 7^ I3 and T> of genus 0). Henceforth assume p = 2. 
Then a degree-p map C — > P is either unramified (with D of genus 1) or 
has precisely two branch points (each with Ii 7^ I2 and D of genus 0) or 
has a unique branch point (with I3 7^ I4 and T> of genus 0). If there is a 



6 



ROBERT M. GURALNICK, JOEL E. ROSENBERG, AND MICHAEL E. ZIEVE 



unique branch point then C is isomorphic to the curve + y = . Since the 
corresponding ehiptic curve has trivial 2-torsion, it fohows that a degree-2 
function on this curve cannot have two branch points. This completes the 
proof. □ 

We will use the following result, which follows from Proposition 12.11 and 
standard results about ramification groups (cf. ^30^ §IV2]). 

Corollary 2.2. Let p: C ^ D and p' : C ^ ¥^ be Galois covers of curves 
over J. Suppose that p' has degree a power of p, and that all second ramifica- 
tion groups of p' are trivial. If Ii and I2 are the first and second ramification 
groups of p at some point of C, then Ii is elementary abelian, I2 = 1, and 
Ii is its own centralizer in I. 

We now give a different proof of this corollary, which generalizes the 
corollary in a different direction than does Proposition 12.11 For a curve C 
over i, let pc denote the p-rank of C (i.e., the rank of the p-torsion subgroup 
of the Jacobian of C). Let gc denote the genus of C. These quantities are 
related by pc < gc- Recall that C is called ordinary if pc = gc- We first 
record a standard basic fact. 

Lemma 2.3. Let 6: C ^ D be a cover of curves over J. If C is ordinary, 
then D is ordinary. 

This lemma and the next one are proved in |29i Thm. 1.2]. The strategy 
for proving the next lemma comes from [271 Thm. 2]. 

Lemma 2.4. Let 9: C ^ T> be a Galois cover (of curves over I) whose 
Galois group H is a p-group. Then C is ordinary if and only if both 

(i) T) is ordinary; and 

(ii) every branch point of 9 has trivial second ramification group. 
Proof. We use the Deuring-Shafarevich formula ( [31^ Thm. 4.2]): 

\V\ ^ V en 

where eq is the ramification index of 9 at the point Q. 
The Riemann-Hurwitz formula yields 



9c 

—rryr- = 9v - ■ 

V ^ en 

' ' Qev ^ 

where s is the contribution from the second and higher ramification groups. 
Note that s > 0, with equality if and only if all second ramification groups 
are trivial. 

Since pt> < gvi we conclude that pc = gc holds if and only if px> = gv 
and s = 0. □ 
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Alternate proof of Corollary \ 2. Si By applying the previous result with 9 = 
p', we see that C is ordinary. Applying it with 9 = p shows that /2 = 1, and 
then the remaining assertions follow from standard properties of the higher 
ramification groups. □ 

Remark. It would be interesting to refine the above alternate proof of Corol- 
lary [22] to prove Proposition 12. 1[ Such a refinement would likely require a 
refinement of the Deuring-Shafarevich formula that involves finer invariants 
than just the p-rank. However, we do not know such a refined formula. We 
thank Hendrik Lenstra for suggesting this possibility. 

3. Previous results 

We will use the following result from the companion paper [20^ Lemma 
2.7]. Recall our convention that x is transcendental over k; also B is the 
group of upper triangular matrices in SL2(g), and W = B r\ SL2(2). 

Lemma 3.1. Let k he a perfect field of characteristic 2, and let q = 2^ with 
e > 1. Suppose f £ k[X] is a separable polynomial of degree q{q — l)/2 
which satisfies conditions (i) and (ii) of Theorem \1.S\. Let E he the Galois 
closure of k{x) / k{f [x)) , and let i he the algebraic closure of k in E. Then 
E/£{f{x)) has precisely two ramified places, hoth of degree one, and the 
corresponding inertia groups are B and W (up to conjugacy). Moreover, 
the second ramification group over each ramified place is trivial, and f is 
indecomposahle. The degree [I : k] divides e, and f is exceptional if and only 
if e is odd and [(l.:k] = e. Finally, there is a curve Cq over k such that 
e.k{Co) =e E. 

The following consequence of Lemma 13.11 describes the ramification in 
C ^ C/B, where C = Cq L This too was proved in the companion paper 
[201 Cor. 2.8]. Here T is the group of diagonal matrices in SL2((?). 

Corollary 3.2. IfC is a curve over I for which i{C) = E, then the following 
hold: 

(i) B acts as a group of £- automorphisms on C; 

(ii) the quotient curve C/B has genus zero; 

(iii) the cover C ^ C/B has exactly three hranch points; 

(iv) the inertia groups over these hranch points are B, T, and W (up to 
conjugacy); and 

(v) all second ramification groups in the cover C C/B are trivial. 

We now record some standard facts about subgroups of SL2(g); see for 
instance [H §260], [32l §3.6], or [20l App.]. Here U is the group of elements 
of B whose diagonal entries are 1. 

Lemma 3.3. B = U xT is the semidirect product of the normal subgroup U 
by the cyclic subgroup T . All involutions in B are conjugate. All subgroups 
of B of order q — 1 are conjugate. For j G {1,-1}, all subgroups of SL2(9) 
of order 2{q + j) are conjugate, and these subgroups are dihedral and are 
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maximal proper subgroups of SL2{q)- The normalizer ofW in SL2{q) is U. 
There is no group strictly between B and SL2((7). 

4. i?-CURVES 

Let £ be a perfect field of characteristic 2. In this section we describe the 
curves C over H which admit a 5-action as in Corohary 13.21 We wih show 
that the only such curves C are the curves Ca^p defined as follows. For any 
a, /? S let Ca^p be the curve defined by 

(4.1) v'i + v = ia + [3)w + w'iT( — 

where T{X) := X^/^ + X'^/^ H + X. Note that Ca,f3 is geometrically 

irreducible, since the left side of (|4.ip is a polynomial in v and the right side 
is a rational function in w with a simple pole (at w = oo, with residue a). 

Theorem 4.2. Suppose C is a curve over i satisfying the five properties in 
Corollary \EE Then £^¥g and C ^ Ca,p for some a,(3 £t. 

Indeed, suppose C satisfies the properties of Corollary 13.21 Since the 
inertia groups B, T, and W are not conjugate, the corresponding branch 
points are ^-rational, so for a suitably chosen coordinate t on C/B they are 
oo, 0, and 1, respectively. Note that C/U C/B \s a cyclic cover of degree 
q — 1 which is totally ramified over oo and 0, and unramified elsewhere. By 
Riemann-Hurwitz, C/U has genus zero. Each of the g — 1 order-2 subgroups 
of U is conjugate to W, and is thus an inertia group in C — > C/S, hence 
also in C — > C/U . Thus there must be at least g — 1 distinct places of C/U 
lying over the place t = 1 of C/B, so all of these places must be rational. 
Choose a coordinate w on C/U such that, in the cover C/U — > C/B, the 
points oo, 0, and 1 map to oo, 0, and 1, respectively. Then (.{C/U) = i{w) 
and £{C/B) = i{t) where t = w'^~^ . Since C/U — > C/B is Galois, £ contains 
F,. 

In these coordinates, the branch points of the cover C — > C/U are oo and 
the q — 1 elements of F* (i.e., the points over t = 1) with the corresponding 
inertia groups being U and its g — 1 subgroups of order 2. 

Let Ci = C/H, where H is a maximal subgroup of U. Since C — > C/U has 
no nontrivial second ramification groups, the same is true of Ci — > C/U, so 
(since i is perfect) Ci is defined by an equation of the form 

(4.3) y^ + y = aw+y] + 7 

for some y £ £{C) and a,/3^,7 G £. Note that a ^ (since u; = oo is a 
branch point). Clearly (3(^ ^ if and only if ti; = is a branch point of the 
cover Ci C/U, and the latter holds if and only if H does not contain the 
inertia group of w; = in C — > C/C/. Thus, is nonzero for precisely q/2 
values C- 
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Let r be the set of elements z G i[C) for which 

z +z = a(z)w^ > - + 7(2;) 

with a(2:), /^(^(z), 7(2:) G I. Note that 0(2;), /3a (-2) > ^^id 7(-2) are uniquely 
determined by z, and each of them defines a homomorphism Y ^ I. Let 
Lq = r n l{vS)\ considering orders of poles, we see that Fq = I. 

Since B = UT, restriction to C/U induces an isomorphism T = B/U, 
so T = {(f)^ : r] E F*} where fp'qiw) = f]w. Clearly F is T-invariant. The 
following lemma enables us to choose y so that Ty U {0} is a group. 

Lemma 4.4. There exists an order-q subgroup Fi of F such that F = Fo©Fi 
and the nonzero elements of Ti comprise a single T -orbit. 

Proof. The map 0: 2: + Fq i— > i{w,z) defines a surjective T-set homomor- 
phism between F/Fq \ {0} and the set A of degree-2 extensions of £{C/U) 
contained in i{C). We first prove injectivity of 9: suppose 2:1, 2:2 G F\Fo sat- 
isfy i{w, zi) = £{w, Z2). Then the nonidentity element of Gal(£(ti;, zi)/l{w)) 
maps zi <^ zi + 1 and Z2'^ Z2 + 1, hence fixes zi + Z2, so 2:1 + 2:2 € Fq = I. 
Hence 9 is injective. Since A is a transitive T-set of size g — 1, it follows that 
|F/Fo| = q and T acts transitively on F/Fo\{0}. Finally, since |r| is odd and 
both F and Fq are T-invariant elementary abelian 2-groups, Maschke's theo- 
rem (^4 12.9]) implies there is a T-invariant group Fi such that F = Fo©Fi, 
and |Fi| = |F/Fo| = q. □ 

By replacing y hy y + 6 for some (5 G Fq, we may assume that y is in Fi. 
Applying (t)r^ to ()4.3p . we see that yr^ := (pniv) satisfies 

y +y = ar]w + > ■ — 33- + 7. 

Thus, 7(yr?) = 7 and a(yr?) = otrj and Prj-'^ciVv) ~ f^C- Since the homo- 
morphism z 7(-z) is constant on the nonzero elements of the group Fi, it 
follows that 7 = 0. 

Since Fi = {y^} U {0} is closed under addition, -|- y^' = y^// for some 
rj" . Comparing images under a yields that 

+ Vv' = Vv+v' ■ 

Thus, 

+ I3r,= PiivO + Pi{yv) = Piivc+v) = I^C+v 

Since P( = for exactly q/2 — 1 choices of C S I^gi this implies that P( = 
for C in some hyperplane (i.e., index-2 subgroup) TC of Fg, and = for 
C, C' Hence, /9^(yr;) = for C G r]~^Ti.. The hyperplanes r]~^Ti. comprise 
all g — 1 hyperplanes in ¥g, so there is some rj for which r]~^TC is the set of 
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roots of T(X) := X"/'^ + X'il'^ + --- + X. Replacing y by y^^, the equation 
for Ci becomes 

Note that a and (3 are nonzero elements of I. 

Since £{C) is the Galois closure oi i{C\) / l{w'^~'^) , it is uniquely determined 
by the choice of a and (3. Thus, to conclude the proof of Theorem 14.21 it 
suffices to show that (for each choice of a,/3 G I*) the curve Ca^p satisfies 
the hypotheses of the theorem, and that the quotients of C^^p by B and by 
some order-g/2 subgroup induce the above cover Ci F^,-i- The following 
lemma is clear: 

Lemma 4.5. If t contains Fg(a,/?), then for any ('^^ ^) G i? there is a 
unique automorphism of Ca,f3 mapping w ^ 'y'^w and v i— > j'^v + jS. This 
correspondence defines an embedding B ^ A\iti{Ca,p) ■ 

We now show that C^^p (together with this action of B) has the desired 
properties. 

Lemma 4.6. The curve C := Ca,p has genus q{q — l)/2. Moreover, the fixed 
fields 1{C)^ and £{C)^ equal £{w) and i{w'^~^), and the cover C ^ C/B has 
precisely three branch points. The inertia groups over these points are (up to 
conjugacy) B, T, and W. Also, the second ramification groups at all three 
points are trivial. Finally, ifH = {{lf) : T{S) = 0}, then 1{C)^ = e{w,y) 
where 

T(C)C 



(4.7) y^ + y = aw + (3Yl 



w — C 



Proof It is clear that i{Cf = iiw) and i{C)^ = £{t), where t := w'^-^ . 
Also, both w and y := T{v) are fixed by H, and a straightforward calculation 
yields 

y'^ + y = {a + (3)w + w''T(-^) =aw + (3Y '^^ + h + h^ 



for an appropriate h G i{w). Thus, H fixes w and y :=y + h, and y satisfies 
(lOl) . Since y ^ l{w), it follows that t(C)^ = £{w,y). Note that the genus 
of £{w, y) is q/2, since the right hand side of ()4.7p has precisely l + q/2 poles 
and they are all simple. 

Let V = C/U &udB = C/B, so i{V) = i{w) and £{B) = £{t). The cover 
T> ^ B is only ramified at w = and w = oo, and is totally ramified at both 
of these points. The cover C — > I? can only be ramified at points with v = oo, 
hence at points with w £ F* or w = oo. The point w = oo of P is totally 
ramified in C — > P, since w is a simple pole of the right hand side of (j4.ip . 
The points w g¥* ofT> all lie over the point t = 1 of ;S, and precisely q/2 of 
these points are ramified in C/H ^ T>. Since T permutes transitively both 
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the q — 1 points in V over t = 1 and the q — 1 index-2 subgroups of U, we see 
that each such point ramifies in precisely q/2 of the covers C/V D as V 
ranges over the q — 1 index-2 subgroups of U. This imphes that each w g¥* 
has ramification index 2 in C — > P. Thus, the only branch points of the 
cover C ^ C/B are oo, 0, and 1, and the corresponding ramification indices 
are q{q — 1), q — 1, and 2. Hence, up to conjugacy, the corresponding inertia 
groups are B, T, and W. Moreover, since the second ramification groups 
of C/H D are trivial, the same is true of every C/V D, and hence of 
C — > P. It follows from Riemann-Hurwitz that C has genus q{q — l)/2. □ 

This concludes the proof of Theorem 14.21 

5. Automorphism groups of S-curves 

Let I be an algebraically closed field of characteristic 2, let a,P E J*, 
and put C := C^fi as in (j4.ip . By Lemma 14. 6| C admits an action of B 
satisfying the five properties of Corollary 13.21 In this section we prove that 
the automorphism group of C is either B or Slj2{q)- 

Let Pi, i-*2 5 and P3 be points of C whose stabilizers (in B) are B, W, and 
T, respectively. Let Q be the automorphism group of C. 

Lemma 5.1. Let V < U be a subgroup with \ V\ > 2. Then Ng{V) < B and 
\G '■ B\ is odd. Moreover, B is the stabilizer of Pi in Q. 

Proof. Let B be the stabilizer of Pi in and let U be the Sylow 2-subgroup 
of B. Corollarv 12.21 implies that U is elementary abelian and that C — > C/U 
has trivial second ramification groups. 

Write |?7| = qq. Since the q — 1 order-2 subgroups of U are all conjugate 
under B, they are all inertia groups in C — > C/U. These subgroups are 
nonconjugate in the abelian group C/, so C ^ C/U has at least q — 1 distinct 
branch points not lying under Pi. By Riemann-Hurwitz, 2{qq + q{q — l)/2 — 
1) = ind(Q) where Q varies over the branch points of C ^ C/U and 

md{Q) is the sum of the different exponents (in the cover C C/U) of the 
points over Q. If Q lies under Pi, then Q is totally ramified so md{Q) = 
2{qq — l). Any branch point satisfies md{Q) > qq (since C — > C/U is a Galois 
cover with Galois group a 2-group). Thus, 

2(gg+ ^^^~^^ -1) >2{qq-l) + {q-l)qq, 

or q{q — 1) > {q — l)qq. Hence q = 1, so U = U. 

By Corollarv 12.21 U is its own centralizer in B, so conjugation induces a 
faithful action of B/U on U and thus also on U \ {0}. Since B/U is cyclic, 
it follows that \B/U\ < \U \ {0}| = \B/U\, soB = B. 

Since we know the inertia groups of C C/B, we see that Pi is the only 
point of C fixed by V. Thus, Ng{V) fixes Pi, so Ng{V) < B. In particular, 
Ng{U) = Nb{U) =B. liU is not a fuh Sylow 2-subgroup of g, then (since 
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2-groups are nilpotent) \Ng{U) : U\ is even, a contradiction. Thus, \Q : B\ is 
odd. □ 

Lemma 5.2. The following are equivalent: 

(i) Q = B; 

(ii) Pi and P3 are in distinct Q- orbits; 

(iii) T = Ng{T); and 

(iv) \Ng{T):T\^2. 

Proof. By Lemma 15. 1^ the intersection of the stabiUzers (in Q) of Pi and 
P3 is T. Since distinct P-conjugates of T intersect trivially, any nontrivial 
element of T fixes precisely two points of C (namely Pi and P3). Thus, 
Ng{T) preserves A := {PijPa}, so either it acts transitively on A (and 
\Ng(T) -.Tl = 2) or else Ng{T) = T. Hence conditions (iii) and (iv) are 
equivalent, and they both follow from (ii). If 1/P3 = Pi with ly G Q, then T'^ 
is contained in B, so T'^ = T'^ for some fj, £ B; but then fi~^i' £ Ng(T) \ T. 
Hence (ii) and (iii) are equivalent. 

Clearly if ^ = P, all the remaining conditions are true. So we assume the 
last three conditions and show that Q = B. 

Suppose Pi and P3 are in distinct ^-orbits. Let / be the stabilizer of P3 
in ^, so I = VT where F is a normal 2-subgroup and T is a cyclic group 
of odd order. Since I contains T, by Schur-Zassenhaus T is contained in 
an I-conjug ate T ofT,so I = VT . Since T is cyclic, it normalizes T, so 
(by (iii)) T = T. Since C/ is a Sylow 2-subgroup of G (Lemma 15. ip . some 
conjugate V' of V is contained in [/; by our hypothesis on the inertia groups 
of C ^ C/P, either \V\ <2or:V' = U. But V U because Pi and P3 are 
in distinct ^-orbits, and \V\ 7^ 2 since \I-T\ =2 contradicts (iii). Hence 
I = T. Since any nontrivial element of T fixes no point of QP3 \ {P3}, it 
follows that Q acts on QP^ as a Frobenius group with Frobenius complement 
T; let K be the Frobenius kernel. Since K is a normal subgroup of G that 
contains a Sylow 2-subgroup, K contains every Sylow 2-subgroup, so P < K. 
By Lemma EH Ng{U) = P, so Nk{U) = BnK = U. Nilpotence of the 
Frobenius kernel implies K = U, so G = KT = P. □ 

Lemma 5.3. W is the stabilizer 0/P2 in Q. 

Proof. Let W be the stabilizer of P2 in ^. Let W be the Sylow 2-subgroup of 
W. By Corollarv 12.21 W is elementary abelian and is its own centralizer in 
W. Thus, W/W embeds in Aut(TF). liW = W, this implies that W = W. 
Now assume that W strictly contains W] we will show that this leads to a 
contradiction. Note that Lemma 15.21 implies P3 G QPi- 

Let C be the centralizer of in Q. Then C contains U and W , where 
W r\U = W . Let A = CP2. Since W and C commute, W acts trivially on 
A, so A C {Pi} U PP2. But P is a Sylow 2-subgroup of ^, so it contains 
a conjugate W oiWm.Q, and since \W\ > 2 we must have z^P2 = Pi. 
Hence A = {Pi} U PP2. The stabilizer of Pi in ^ is P, and the stabilizer in 
P of any element of U P2 is W. Thus any two-point stabilizer of C on A is 
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conjugate in C to TV, hence equals W ^ so C /W is a Frobenius group on A. 
A Frobenius complement is U /W (since B Ci C = U). It is well known (and 
elementary in this case: cf. [12^ Thm. 3.4A]) that an abelian subgroup of a 
Frobenius complement must be cyclic. Hence U/W is cyclic, so (7 = 4. In 
this case C /W is dihedral of order 6, so (since C contains U) the group C 
is dihedral of order 12. 

Let T' be the order-3 subgroup of C. Since T' is normal in C, no sub- 
group of C properly containing T' can be an inertia group in C —> C/C (by 
Corollary I2.2p . Thus, every orbit of C/T' on the set F of fixed points of T' 
is regular, so |F| is divisible by 4. Since T fixes precisely two points of C, it 
follows that T' and T are not conjugate in ^, so a Sylow 3-subgroup of Q is 
noncyclic, and thus contains an elementary abelian subgroup of order 9 [U 
23.9]. By Lemma |4.6|, C has genus q{q — l)/2 = 6. But Riemann-Hurwitz 
shows that (in characteristic not 3) an elementary abelian group of order 9 
cannot act on a genus-6 curve, contradiction. □ 

Theorem 5.4. If Q ^ B then Q = SL2((7) and C C/Q has precisely two 
branch points, with inertia groups B and W . 

Proof. Assume that Q ^ B. Consider the cover C C/Q. By Lemmas 
15.11 and 15.31 the inertia groups of Pi and P2 in this cover are B and W, 
respectively. Since these groups are nonconjugate. Pi and P2 lie over distinct 
branch points Qi and Q2. By Lemma 14.61 and Corollary 12.21 every branch 
point oi C ^ C/Q has trivial second ramification group. 

For a point Q oiC/Q, let md{Q) denote the sum of the different exponents 
(in the cover C — > C/Q) of the points lying over Q. Note that ind((5i)/|^| = 
1 - 2/\B\ + \U\/\B\ = l + {q- 2)/\B\ and ind(Q2) = \QV The Riemann- 
Hurwitz formula gives 

g(g-l)-2 = -2|g| + ind(Qi)+ind(Q2)+ ind(Q) 

Qi{Qi,Q2} 

= {q-2)\Q:B\+Y,\nd{Q); 

Q 

since any branch point Q satisfies md{Q) > 2|^|/3 > q{q — 1), it follows 
that Qi and Q2 are the only branch points in C ^ C/Q, and we must have 
\Q:B\ =q+l. 

By Lemma 15.21 T has index 2 in H := Ng[T). Thus H preserves the 
set {Pi,i-*3} of fixed points of T. Lemma 15.21 implies Pi G QP^^ so I^PsI = 
\QPi\ = \Q:B\ = q + l. Since IPP3I = g, it follows that QP^ = BP3 U {Pi}. 
Pick an involution v ^ H. If v fixes Pi then Lemma [5 . 1 1 implies ly € B; but 
must also fix P3, which is impossible since the stabilizer of P3 in S is T (and 
T contains no involutions). Thus must swap Pi and P3. By Lemma 15.1^ 
f7 is a Sylow 2-subgroup of Q; since all involutions of U are conjugate in B, 
it follows that 1/ is conjugate in Q to the nonidentity element of W, and thus 
fixes a unique point of ^Pi . 
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The orbits of on A := QPi are the fixed point Pi and the g-element 
orbit BP3. Since B has a unique conjugacy class of index-g subgroups, this 
determines A as a i?-set. The same orbit sizes occur in the action of B 
on P^Fq) induced by the usual action of PSL2(q) on P^(Fg). Thus, A and 
P^(Fg) are isomorphic i?-sets. We will show below that, up to T-conjugacy, 
there is a unique involution in the symmetric group of T which normalizes 
T and has a unique fixed point. Since SL2(g) contains such an involution, 
we can extend our isomorphism of -B-sets A =b P^(Fq) to an isomorphism 
of {B, i/)-sets, and in particular SL2((?) has a subgroup isomorphic to {B, v). 
Since S is a maximal subgroup of SL2((7), we have (i?, v) = SL2{q), whence 
(since |^| < | SL2(g)|) we conclude G = SL2(g). 

It remains to show that, up to T-conjugacy, there is a unique involution 
P in the symmetric group of A which normalizes T and has a unique fixed 
point. Note that T fixes Pi and P3, and T is transitive on the other q — 1 
points of A. Thus u permutes {Pi,P3}, and the fixed point hypothesis 
implies interchanges Pi and P3. Hence P fixes a unique point of TP^, 
so we may may identify this orbit with T and assume the fixed point is 
1 G T. The only order-2 automorphism of T with no nontrivial fixed points 
is the automorphism inverting all elements of T, whence is unique up to 
T-conjugacy. □ 

6. G-CURVES AND HYPERELLIPTIC QUOTIENTS 

Let J be an algebraically closed field of characteristic 2, let a, (3 G J*, 
and let C := Ca,^ be as in (14. Ih . We use the embedding B AutC from 
Lemma 14.51 By Theorem 15. 4^ the automorphism group of C is either B or 
G := SL2{q). In this section we determine when the latter occurs. 

Proposition 6.1. C has automorphism group G if and only if 0^ = a + a^. 

Set t := w'^~^ and y := v/w. Since T fixes t and y, we have J{t,y) C 
£{v, w)'^ = '1{C/T). Clearly w has degree at most g — 1 over y), and also 
I{v,w) =e{y,w). Thus, £(C/T) =£{t,y). 

The curve C/T is defined by the equation 

g , y a + P , (3 



+ T = + T 



t t \t + i^ 

which is irreducible because \i{y,t) = q. Putting 



2^ ^ P 
z-=y +y + 



we compute 



and thus 



T(.) = .^ + . + T(^)=,(l + l) + « + ^ 



t + lJ tJ t 

tT{z)+a + l3 
t + l ■ 
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It follows that 

Lemma 6.2. I{C/T) = I{t,z) andI{C) = I{w,z). 

Our next result gives further information about C/T. 

Lemma 6.3. C/T is hyperelliptic of genus q/2, and the hyperelliptic invo- 
lution V fixes z and maps 1 1— > (a^ + a + + z)/{z'^t). 

Proof. Substituting our expression for y (in terms of t and T{z)) into the 
definition of z gives 

^ (tT(z) +a + l3f + {tT{z) +a + f3){t + 1) + /3(t + 1) 

{t+ir 

so = t'^z'^ + t{T{z) + a) + {z + a"^ + a + fP). By considering the order of 
the pole at the point z = oo in this equation, we see that t ^ i{z). Thus, 
z) :i{zy\ = 2. Our hypothesis on the ramification in C ^ C/B implies 
that £{t,z) has genus q/2. Hence C/T is hyperelliptic, and the hyperelliptic 
involution u fixes z and maps 1 1-^ (a^ + a + + z)/{z'^t). □ 

Suppose in this paragraph that Aut£(C) = G, and choose the isomorphism 
so that it extends our previous embedding B ^ Aut;^(C). By Theorem [231 
there are points Pi, P2 on C whose stabilizers in G are B and W, respectively, 
and moreover the corresponding points Qi,Q2 on C/G are the only two 
branch points of C ^ C/G. By LemmaE]21 H := Ng{T) has order 2(g — 1), 
so Lemma [3 . 3 1 implies H is dihedral, hence contains q—1 involutions. But all 
involutions in G are conjugate, and each fixes q/2 points of GP2, so C/T 
C/H is ramified over q/2 points lying over Q2. Likewise, C/T C/H is 
ramified over a unique point lying over Qi,soC/T ^ C/H has l-\-q/2 branch 
points and thus (since C/T has genus q/2) we find that C/H has genus zero. 
By uniqueness of the hyperelliptic involution, we must have 1{C)^ = l{z), 
and each element n £ H \ T is an involution whose restriction to C/T is the 
hyperelliptic involution v. Now, {wfi{w)y~^ = tp(t) = {a^ -\-a+ 0^ + z) / z'^ is 
in ^(z), so I{wfj,{w), z)/l{z) is cyclic of order dividing g — 1; but the dihedral 
group of order 2(q — 1) has no proper normal subgroups of even order, so 
wfj,{w) S i{z). Thus (a^ + a + P"^ + z)/ z'^ is a {q — l)-th power in i{z), so 

Conversely, we now assume that = + a (with a ^ F2 , since /3 7^ 0) . 
By Lemma 16.21 there are precisely q — \ extensions of v to an embedding 
of l{fS) into its algebraic closure, one for each (g — l)-th root of p(t) (this 
root will be p{w)). Since tp{t) = l/z'^~^, each of these extensions maps 
w 1-^ C/{zw) with C and so in particular leaves £{C) = £{w, z) invariant 
(and thus is an automorphism of i{C)). Since Autj(C) properly contains B, 
Theorem 15.41 implies that Autj(C) = SL2{q). This completes the proof of 
Proposition 16.11 
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7. Forms of Ca,i3 

In this section we study isomorphisms between curves of the shape Ca,i3, 
and isomorphisms between these curves and other curves. 

Proposition 7.1. Let J be an algebraically closed field of characteristic 2. 
For a, /3, a' , (5' , the curves Ca,p and Ca',p' are isomorphic if and only if 
a = a' and [3 = [3' . 

Proof. Let C = Ca^p and C = Ca',^', and let G = AutC and Q' = AutC. 
Write the equations of C and C as v"^ +v = {a+P)w+w'^T{P/{l+w'^~^)) and 
{v')'i+v' = {a'+f3')w'+{w')'^T{/3'/{l+{w')'^-^)), respectively. Suppose there 
is an isomorphism p: C ^ C. Conjugation by p induces an isomorphism 
6: Q Q' . By replacing p by its compositions with automorphisms of C and 
C, we can replace 9 by its compositions with arbitrary inner automorphisms 

of g and g'. 

We use the embeddings B ^ g and B ^ g' from Lemma 14.51 By 
Lemma l5.1|. C/ is a Sylow 2-subgroup of g and g' , so (by composing p with 
automorphisms) we may assume 0(U) = U. Since all index-2 subgroups of 
U are conjugate under B, we may assume in addition that 0{H) = H where 
H is a prescribed index-2 subgroup of U. Then p induces an isomorphism 
between C/U and C /U which maps the set of branch points of C/H C/U 
to the corresponding set in C' /U. For definiteness, choose H to be the 
subgroup defined in Lemma 14.61 and choose the coordinates w and w' on 
C/U and C'/U. The branch points of each of C/ H ^ C/U and C'/H C'/U 
(in the coordinates w and w') are {5 : T{5) = 1} U {oo}. 

Since B is the normalizer of U in both g and g' (by Lemma fS.ip . it follows 
from 9{U) = U that 0{B) = B. The only points of C/U which ramify in 
C/U C/B are w = and w = oo, so p must map these to w' = and 
to' = oo in some order. Thus, p{w) is a constant times either w' or 1/w'. 
Since also p preserves {6 : T{6) = 1} U {oo}, we must have /o(w) = w'. 
Since 6{H) = H and the right hand side of (|4.7p has only simple poles, by 
applying p to this equation we see that a = a' and j3 = (3' . □ 

Proposition 7.2. Let k be a perfect field of characteristic 2, and let k be 

an algebraic closure of k. Let C = Ca,i3 where a, f3 ^ k . Let C be a curve 
over k which is isomorphic to C over k. Let t be an extension of k such that 
Autei£{C')) ^ Aut^(k{C')). Then: 

(i) k contains ¥2(0,(3); 

(ii) C is defined over k; and 

(iii) C is isomorphic to C over I. 

Proof. Note that k{C) = k{y,w) where v,w satisfy 

v'i + v = {a + (3)w + w'^t( tV 

\1 + wt ^ / 
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If p is any /c-automorphism of k{C), then k{C) = k{yi,Wi) where Vi := p{y) 
and wi := p{w) satisfy 

vl + v, = (pia) + pmw, + u;? t(-^^^) . 

Thus, Cq,^/3 = Cp(^ct),p{i3)j whence (by the previous result) p fixes a and (3. 
Hence ¥2{a,(3) is fixed by the fuU group of A;-automorphisms of k{C). 

By hypothesis, there is a /c-isomorphism 9 between k{C) and k{C'). Con- 
jugation by induces an isomorphism Autfc(/c(C)) = Autfc(/c(C')), so in par- 
ticular both of these groups fix the same subfield of k. Since k is perfect 
and C is defined over k, the subfield of k fixed by Autk{k{C')) is just k, so 
F2(a,/3) C k. 

Clearly C is defined over ¥2(0, f3), hence over k. Finally, by Theorem 14.21 
and Proposition 17.11 there is an ^-isomorphism i(C) = i{C'). □ 



8. Existence and uniqueness of polynomials 

Let k he a perfect field of characteristic 2, and let g = 2^ > 2. In this 
section we prove a preliminary version of Theorem 11.21 in which we describe 
the Galois closure of k{x)/k{f{x)) rather than describing the polynomials 
/. Here x is transcendental over k, and we say c G k[X] are k-equivalent 
if there are linear polynomials ^1,^2 G k[X] such that b = ii o co H.2- 

Theorem 8.1. If f & k[X\ is a separable polynomial of degree {q^ — q)/2 
such that 

(i) the geometric monodromy group of f is SL2((?); and 

(ii) the extension k{x)/k{f{x)) is wildly ramified over at least two places 
ofk{f{x)), 

then there is a unique pair (a, (3) k* x k* with (5"^ = a + for which the 
Galois closure of k{x)/k{f{x)) is isomorphic to {k.¥g){Ca,i3)- Conversely, 
each such pair (a, /?) actually occurs for some f with these properties, and 
two such polynomials are k-equivalent if and only if they correspond to the 
same pair (a, /?). Finally, every such f is indecomposable, and f is excep- 
tional if and only if e is odd and n Fg = F2 . 

Our proof uses a corollary of the following simple lemma (cf. [121 Thm. 
4.2A]): 

Lemma 8.2. Let G be a transitive permutation group on a set A, and let 
Gi be the stabilizer of a point vr G A. Let C be the centralizer of G in the 
symmetric group on A. Then C = Nq(Gi)/Gi, and C acts faithfully and 
regularly on the set of fixed points of Gi . In particular, C is trivial if Gi is 
self-normalizing in G. 

Proof. Note that an element r G C is determined by the value T(7r) (since 
r(i^(7r)) = i/(r(7r)) for every G G). 
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If G acts regularly on A, then we can identify the action of G on A with 
the action of G on itself by left multiplication. Clearly right multiplication 
commutes with this action, so the map r i-^ r(l) induces an isomorphism 
C = G, and G acts regularly on A. 

Let A be the set of fixed points of Gi. Then Ng{Gi)/Gi acts regularly 
on A. Letting G be the centralizer of Ng{Gi) in Sym(A), the previous 
paragraph shows that C = Ng{Gi)/Gi acts regularly on A. Since G acts 
on A and G centralizes Ng{Gi), restriction to A induces a homomorphism 
9: G ^ C. We see that 9 is injective, since r G C is determined by T(-7r). It 
remains only to prove that 9 is surjective. For fi £ C, v £ G and X £ Gi, 
note that z^(A(//(7r))) = z/(/i(A(7r))) = /^(^(vr)); hence the image of /i(7r) 
is constant on each coset in G/Gi, so the map i'{tt) i— > v{^{-k)) defines a 
permutation cj) of A. Plainly cj) centralizes G and = so the proof is 
complete. □ 

Corollary 8.3. Let f E k[X] be a separable polynomial, let E be the Galois 
closure of k{x)/k{f(x)), and let i be the algebraic closure of k in E. Put 
A := Gal(^/A;(/(x))), G := Gal{E/£{f{x))), and Gi := Gal{E/£{x)). If 
NciGi) = Gi, then C7a(G) = 1. 

Proof of Theorem \8.1[ Suppose / G k[X] is a separable polynomial of degree 
{q^ — q) /2 which satisfies conditions (i) and (ii) of Theorem 18.11 Let E be 
the Galois closure of k{x)/k{f{x)), and let £ be the algebraic closure of 
k in E. Then there is an ^-isomorphism between E and £{Ca^p) for some 
a, /3 S £*, and also ^ 2 Fg (by Corollary 13 . 21 and Theorem l4.2p . This uniquely 
determines the pair (a,/3) (Proposition 17. ip . By Theorem l5.41 the geometric 
monodromy group G := Gal(-E/^(/(x))) equals Aut^ ^(Co,/?), so Proposition 
16. II implies 0^ = 0^ + a. By Lemma [XT] and Proposition I7.2[ both a and f) 
are in k. By Lemma [3.31 the hypotheses of the above corollary are satisfied, 
so no nontrivial element of Gal{E / k{f {x))) centralizes G. Since every £- 
automorphism of £{Cafi) is defined over fc.F^, we see that G commutes with 
G3l{E / {k.W q){Ca,p)) ■, so L = (k.¥q){Ca,/3)- We have proven the first sentence 
of Theorem 18. 11 

Conversely, suppose a, (3 £ k* satisfy = a + a^, and put £ := kFg. Let 
E = £{Ca,/3)- We have shown that G := Aut^-E satisfies G = SL2(q'), and 
that there are degree-one places Pi and P2 of E whose stabilizers in G are 
B and W, respectively. Moreover, E has genus q{q — l)/2, and the second 
ramification groups at Pi and P2 are trivial. By Riemann-Hurwitz, the only 
places of E'-' which ramify in E/E^ are the places Qi and Q2 which lie 
under Pi and P2- Let Gi be a subgroup of G of index q{q — l)/2. Then Gi 
is dihedral of order 2{q + 1), and hence contains g + 1 involutions. Each of 
the (? + 1 conjugates of U contains precisely one of these involutions. Hence 
there is a unique place of E^^ lying over Qi, and its ramification index in 
E/E^^ is 2. Also there are precisely q/2 places of E^^ which lie over Q2 and 
ramify in E/E^^, and each has ramification index 2. Thus E^^ has genus 
zero, and Qi is totally ramified in E^^jE'^. Next, A := Autk E satisfies 
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A = G. G8l{E/k{Ca,/3))- Since G is normal in A, and Gi is conjugate (in 
G) to all {q^ — q)/2 subgroups of G having order 2q + 2, it follows that 
\Na{Gi):Gi\ = \i:k\ and Na{Gi)G = A. Thus, E^a(Gi) ^ genus-zero 
function field over k which contains a degree-one place that is totally ramified 
over E^. We can write ii^^-iCd) = k{x) and = k{u), and by making 
linear fractional changes in x and u we may assume that the unique place of 
k{x) lying over the infinite place of k{u) is the infinite place. In other words, 
u = f{x) for some / € k[X]. Separability of / follows from separability of 
k{x)/k{u). The degree of / is {(f'—q)/2, and its geometric monodromy group 
is SL2(g) (since Gi contains no nontrivial normal subgroup of SL2{q)). The 
extension k{x)/k{f{x)) is totally ramified over infinity, and also is wildly 
ramified over another place of k{f{x)). 

Next we show that the Galois closure of k[x)/k{f{x)) is E, or equivalently 
that Na{Gi) contains no nontrivial normal subgroup of A. Let J be a 
proper normal subgroup of A. Since G is normal in A (and simple), J must 
intersect G trivially. Thus each element of J has shape va, where v ^ G 
and a G G?1[E /k{Ca^i3)) satisfy \{i'(t)\ = \{a)\. In particular, J is cyclic; let 
vcT be a generator of J. Since G and J normalize one another and intersect 
trivially, they must commute. Write E = £{v, w) where v'^ + v = (a + P)w + 
w'^ T(/3/(l -|- w'^~^)). Let T £ G map {v, w) i-^ {v + 1, w). Since r commutes 
with both J and a, it also must commute with v. Hence ly maps {v, w) 
(v + a, w) for some a E ¥q. For C S F*, let £ G map {v, w) i— > (("v, Cw). 
Then \(^i'a{w) = C,w, but iya\(^{w) = a{()w, so a fixes C- Hence a fixes both 
Fg and k{Ca^/^), so it fixes i?, whence J = 1. Thus the arithmetic monodromy 
group of / is A. Since G has a unique conjugacy class of subgroups of 
index (g^ — q)/2, all of which are self-normalizing, any two index-(g^ — q)/2 
subgroups of A which surject onto A/G are conjugate. Since A = Aut^E, 
it follows that there is a unique ^-equivalence class of polynomials / which 
satisfy all our hypotheses for a given pair (a,/3). Conversely, ^-equivalent 
polynomials have isomorphic Galois closures, hence correspond to the same 
pair (a,/3). Finally, the indecomposability and exceptionality criteria follow 
from Lemma l3.ll □ 

Corollary 8.4. There exists a separable polynomial f G k[X] of degree 
q{q — l)/2 with two wild branch points and geometric monodromy group 
SL2(g) if and only if k properly contains F2. 

Corollary 8.5. There exists a separable exceptional polynomial f G k[X] 
of degree q{q — l)/2 with two wild branch points and geometric monodromy 
group S1j2{q) if o,nd only if e is odd, k n¥q = F2, and k properly contains 
¥2. 

9. Another nonexistence proof over F2 

One consequence of Corollary 18.41 is that there is no separable polynomial 
/ over F2 of degree q{q — l)/2 such that the cover / : — > has at least two 
wildly ramified branch points and has geometric monodromy group SL2(g). 
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In this section we give a more direct proof of this fact, by showing that the 
Galois closure of such a cover 

/ : pi ^ pi would be a curve having more 
rational points than is permitted by the Weil bound. 

Theorem 9.1. There is no separable polynomial f € F2[X] of degree q{q — 
l)/2 satisfying the following conditions: 

(i) the geometric monodromy group of f is G := SL2(g); 

(ii) the extension F2(a;)/F2(/(a;)) has precisely two branch points, and in 
the Galois closure E/¥2{f{x)) their ramification indices are q{q— 1) 
and 2; and 

(iii) all second ramification groups in E/¥2{f{x)) are trivial. 

Remark. By Lemma f3.lt conditions (ii) and (iii) follow from (i) if we assume 
that / has two wild branch points. Thus, the combination of Theorem 19.11 
and Lemma l3 . 1 1 implies the 'only if implication in Corollary 18.41 

Proof. Suppose there is an / satisfying the above conditions. The Riemann- 
Hurwitz formula implies that the genus of is q{q — l)/2. 

Since the two branch points of E/¥2{f{x)) have nonconjugate inertia 
groups, these points must be F2-rational. Let Q be the point with ramifica- 
tion index 2. 

Let A := Gal(£'/F2(/(x))) be the arithmetic monodromy group of /. By 
Corollary [831 G<A< Aut(G) = SL2(g).e. Thus, A = G.e' for some e' \ e. 
It follows that the algebraic closure of F2 in S is ^ := F^e'. Let P be a 
place of E lying over Q. Let H be the decomposition group of P in the 
extension E/¥2{f{x)). We know that the inertia group W P has order 
2, so U := Ng{W) has order q. Thus, H < Na{W) = {U,u), where v £ A 
has order e' and maps to a generator of A/G. Since Q is F2-rational, H/W 
surjects onto A/G, or equivalently A = GH. Since H/W is cyclic, it follows 
that \H/W\ is either e' or 2e'. 

Suppose that e' < e. Let £ be the quadratic extension of £. Then \£\ < q. 
Let P be a place of £E lying over P (there are one or two such places). 
Since divides [£:F2], the place P is rational over £. Moreover, the 

ramification index of P in £E/£{f[x)) is 2. Thus, Q lies under \G\/2 rational 
places of £E. Since £E has genus q{q — l)/2, this violates the Weil bound 
for the number of rational points on a curve over a finite field. 

Now suppose that e' = e. As noted above, H < Na{W) = {U,u). For 
any fi G U, the element {fJ-iyY ^ ^ li^s in U and centralizes fiv, hence it 
centralizes ly. However, the centralizer oi u in U is W. Since |C(7(z^)| = 2, 
it follows that no element of Na{W)/W has order 2e, so H/W is cyclic of 
order e. Now, as in the previous case, we obtain a contradiction by counting 
points. □ 

10. Construction of polynomials 

In this section we use the results proved so far in order to compute explicit 
forms of the polynomials whose existence was proved in Theorem 18. li 
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Let A: be a perfect field of characteristic 2, and let g = 2^ > 2. Let 
a,P ^ k* satisfy = a + a^. 

Theorem 10.1. The polynomial 

(10.2) /(X) := (T(X) + a + 1) J] (E Sr^^'^ + C« + 1 

is in the k-equivalence class corresponding to {a, (3) in Theorem \8.1[ 

Proof. Let £ = k.¥q and E = £{Ca,f^). Write E = £{v,w), where v'^ + v 
(a + + T(/3/(l + w?-!)). 

Let w = l/w and v = v'^ /w + v + I3w/{1 + w'^~^). Then 

T(™) = (°)' + il+T(-iL_ 

1 1 \ a+P 



v[ — ^ — 



so k{v,w) = k{v,w). Next, 



y2q piw'l-^ 

ylyj = 1 1 1 

w 1 + wi''-i 
+ ^ + w'''^tI- — - — - +- + a + P 



+ ^TT + TT + - + a + 



= T{vw) + w'^v + Q. 

Since [£{v, w) : i{w)] = [i{v, w) : i{w)] = q, the polynomial wX'^ + T{'wX) + 
w'^X+a is irreducible over ii^w), so also vX'i+T{vX)+v'^X+a is irreducible 
over i{v)- Let i = ¥^2.1, and = i.E. Pick 7 G ^* of multiplicative order 
q + l, and let 5 = 7 + I/7 G F* C t. Let y = (t}7 + u;/7 + l)/5 and 
2; = (-y/'y -)- ^ iy§_ Then £^ = £{v, w) = £{y, z). 

Lemma 10.3. We have [i{y, z) : £{z)] = q + l and 

(10.4) + =T(yz)+a + l. 

For 7] G Fg2 with rj*^^^ = 1, there is a unique element G Aut^£^ which 
maps {y,z) 1— > [yr},z/rj). Moreover, := i^rjls Aut^i?. 
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Proof. We compute 

^a- - -n W'^ + V'^ + W + V 

= w^v + wv^ H 



^, ^ w'^ +v'^ w + v 

= TM + a + ^^ + ^ 

= T(yz) + Q + T(l 
Since 1/5 = 7/(7^ + 1) = 7/(7 + 1) + 7^/(7^ + 1), we have 

\6V \5) 79 + 1^7 + 1 
1 

_ 7 , 7 



^+1 7+1 

Since E = £{y, z) has genus q[q — l)/2 where y and z satisfy equation ()10.4p 
of total degree g + 1, this equation must define a smooth (projective) plane 
curve, and in particular must be irreducible. Thus z) : l{z)] = q+\. Now 
existence and uniqueness of z>,j are clear. A straightforward computation 
yields that maps 

w ^4 ( 5 + {- + -\ + + + vU + - 

0^ \ Vr/ 7/ \7^ 7/ / V 77 

* [5 + (777 + — ) + w(ri + -\ +v(^'^rj H ^ 

V 777/ V 7y/ V 7^7/ 

Since £(^^(7)), Vn{w)) = E, it follows that induces an automorphism of E. 

□ 

We now compute the subfield of E fixed by an mdex.-{q^ — q)/2 subgroup 
of G := Autf-E = SL2(g'). There is a unique element r G Aut^E' such 
that r: (vjiS) ^ iw,v). Note that r maps {y,z) to {z,y), and the group 
Gi := (r, {f^ : 7/'^"'"^ = 1}) is dihedral of order 2q + 2. Hence the subfield of 
E fixed by Gi contains i{yz). Multiplying equation (jl0.4p by y'^~^^, we see 
that [i{y, z) : i{yz)] = [i{y, yz) : i{yz)] <2q + 2, so i{yz) is the subfield of E 
fixed by Gi. Moreover, since 

\ 2 

V + w\ V + w 1 



yz = 1 ] + + ^''w + ^ 

lies in E, the subfield of E fixed by Gi is i{yz). 

Next we compute an invariant of G. Recall that Sh2{q) can be written as 
GTU, where T is the diagonal subgroup, C/ is a unipotent subgroup, and C 
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is a cyclic subgroup of order (q + l). We can choose U to be the set of maps 
erg : {v, w) {v + S,, w) with ^ G Fg, so = £{w). We can choose T to be 
the set of maps /i^: (vjw) i-^ {C~^v,C~^'w) with C^"^ = 1, and C to be the 
set of maps Vrj defined in the above lemma. Hence the product 

n n nw«(^+i) 

,;'?+l=l,j9-l=l5gFq 

is G-invariant. Since this product is the q-th power of 

«:= n n ^^^^(^+^)' 

1,9 + 1=1^9-1 = 1 

also G fixes u. Since 1/w = (z7 + 1 + y'y~'^)/S, we have 

f9-l = l,y9 + l=l 

By the following lemma, 

^= n n ivCy + C + i + v'\z) 

(J9-l = lr;9+l = l 

^9-1 = 1^ 

(c=+,)(i+4.^))) 

= (T(yz)+a + l) J] U{T{yz) + a + l) + 

(C + i)(i + t(,.^))) 

= (TM+a + l) n (£Sr^M''+C« + l)- 

CeF,\F2 i=o 

Thus u = f{yz) where / is the polynomial defined in (110.21) . It follows that 
[iiyz) : eiu)] = deg(/) = (g^ - q)/2. Since E^^ = £{yz) and E^ D i{u) and 
[^Gi ^ ^^2 _ ^y2^ it follows that E'^ = l{u). Now, d contains no 

nontrivial normal subgroup of G, so E is the Galois closure of i{yz)/i{u), 
whence G is the geometric monodromy group of /. Clearly / is fixed by 
Gal{£/k), so / G k[X]. By Theorem 15.41 the extension E/E'^ has two wildly 
ramified branch points, so Theorem 18.11 implies that / is in the /c-equi valence 
class corresponding to the pair {a, (3). □ 
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Lemma 10.5. The following identity holds in k[Y,Z]: 

Yl {loY + 1+ uj-^Z) = + Z"+^ + T{YZ) + 1. 

Proof. By applying the transformation {Y, Z) (ivY, Z/uj), we see that 
Ui^^Y + 1 + uj-^Z) - Yi+^ - Z^+i is a polynomial h{Y Z) G k[Y Z], with 
degree at most q/2 and constant term 1. If we substitute Y = Z = uj/{uj'^ + 1) 
(where w^"'"^ = 1 and w / 1), we see that Y Z = uP' j [uj^ + 1) is a root of h. 
These roots of h are precisely the trace 1 elements of Fg, namely the roots 
of T(yZ) + 1. Hence h(YZ) and T(YZ) + 1 have the same roots and the 
same constant term, and T{YZ) + 1 is squarefree with deg(T+l) > deg(/i), 
so h{YZ) = T{YZ) + 1. □ 

Remark. Once one knows 'where to look' for these polynomials - especially, 
what should be the Galois closure E of k{x)/k{f{x)) - one can give direct 
proofs of their properties. But such proofs would seem unmotivated, since 
we know no way to guess what E should be besides appealing to the results 
in this paper. 

11. Another form for the polynomials 

In the previous section we computed the polynomials whose existence was 
proved in Theorem 18. 11 Our expression for the polynomials was concise, but 
involved a product. In this section we prove Theorem 1 1 . 2 1 and Corollarv 11.31 
by writing the polynomials without any sums or products other than the 
usual T{X) = _^ x'i/^ + ■■■ +X. Here g = 2^ > 2 and /fc is a perfect 
field of characteristic 2. Also a,(3 e k* satisfy = + a. 

Theorem 11.1. The expression 

!(x) := (n^Y (nx) + . t( + 



X J \ a + l V(T(X)+a)2, 

defines a polynomial which lies in the k-equivalence class corresponding to 
(a + l,/?) in Theorem \8. 11 



Proof. First we show that / is a polynomial. Writing h(X) := X'^f(X), we 
have 

h = (T(X) + af . nX) + . if ^<"' + 



a + l V(T(X) + a)2 

e-l 

= {T{X) + ay ■ T(X) + —— (a^ + af (Ji^) + ay+^-^'^' . 

a + 1 

i=0 

Thus /i is a polynomial divisible by X ■ {T{X) + a), and moreover h is monic 
of degree q{q + l)/2. We now determine the multiplicity of X as a divisor 
of h. This multiplicity is unchanged if we replace h by 

ft :=/..(/.+ '^'^> + 
V a + l 
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writing c := X{a + a)/(T(X) + a) , we compute 
a + 1 

= (T(X) + . T(Xf + T(X) . + + (imlii)!!!! . T(c^ + 

a + 1 + 1 

Substituting T(c^ + c) = c'^ + c, and reducing mod X^'^, we find that 

h = a^? T(Xf + ^^!!-(T(X)2 + a T(X)) + C^W +«)^ ^g(^2 ^ 
a + 1 a"' + 1 



+ X{a^ + a) (mod X"^") 

+ 1 



= (T(X)2(a + 1) + T(X)2 + a T(X) + aX) + ^ V -^^(« + «) 

= -^^X'^ (a«+i(a + 1) + (T(X) + af{a + If) , 

so X'^ divides h, whence / is a polynomial divisible by (T(X) +a). Further- 
more, X divides / (equivalently X'^'^^ divides h) precisely when a G Fg, in 
which case X'^ exactly divides /. Since h is monic of degree q{q + l)/2, it 
follows that / is monic of degree q{q — l)/2. 

We now show that //(T(X) + a) is in It suffices to show that 

/ := xy/{T{X) + a) is in k[X\ We compute 

/- = T(.Y)(T(X) + a)-' + £!m±£!)! . f' ■^<°' + " 



a + 1 V(T(X)+a)2 
1 

(T(X) + a)*? + a(T(X) + af^ + V (^(a^ + a))2'(T(X) + a) 

a + 1 'f— :^ 



i=0 

-2 



The summands with i > are polynomials in X . Thus, there exists h G 
k[X] such that 

/ = + a(T(X) + af-^ + aX(T(X) + af^'^ 

= h{X^) + a(T(X) + aY'^{T{X) + a + X), 

so indeed / G A:[X2], whence //(T(X) + a) is in A;[X2]. 
By Theorem llU.il the polynomial 

/(X):=(T(X)+a) \{ (^^1±^X^' + C{a + I) + I 

is in the fc-equivalence class corresponding to (a + 1, /3) in Theorem 18. II By 
Lemma [3 -H the extension k{x)/k{f{x)) has precisely two branch points; one 
of these points is totally ramified, and the ramification index at any point 
of k{x) lying over the other branch point is at most 2. Since k{x)/k{f{x)) is 
totally ramified over the infinite place, there is a unique finite branch point. 
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But plainly f{X) = {T{X) + a)b{X)'^ for some nonconstant b G k[X], so 
f{x) = is the finite branch point, and thus b{X) is squarefree and coprime 
to (T(X) + a). We will show that every root 5 of / is a root of /; it follows 
that the multiplicity of 5 as a root of / is at least as big as the corresponding 
multiplicity for /. Since / and / have the same degree and the same leading 
coefficient, we conclude that / = /. 

It remains to prove that every root of / is a root of /. Recall that, in the 
function field k{y, z) where y^"*"^ + 2;^+^ = '^{yz) + a, we have the identity 

f{yz)= n n (^Cy + C + i + -^) 

^9-1 = 1 ,j9+l = l ^ 

Let (5 be a root of /. Pick y E k* and z E k such that S = yz and y'^"'"^ + 
^q+i — T(yi) + a: such y,z exist because substituting z = 6/y into the 
latter equation (and clearing denominators) gives a polynomial in y which 
is not a monomial, and thus has a nonzero root. If T((5) = a then we already 
know that f{S) = 0. If 5 = then z = and y^+^ = a, so 

o=/(o)= n n w+c+i) 
= n (c^v+'+(c+i)^+') 

^9-1 = 1 

= n (c'«+c'+i) 

C9-l = l 

= (a + 1)^-1 + 1. 

Thus a e¥q, so X"^ divides /. 

Henceforth we assume a 7^ T((5) and S ^ 0. This implies ri(^y + + 1 + 
z^/?7 = for some rj with G Fg \ F2 and ry*"*"-^ = 1. By replacing y and z 
with r/y and z/rj, we may assume 77 = 1, so 

z = y + l + ^. 

Write := 1 + 1/C, and note that (" G Fg \ F2. Since 6 = yz, we compute 
T{6) + a = yi+^ + z''+^ 
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and 

T{6) = T{y^ + Cy) 

Thus 
so 

+ C = T(y + Cy). 
Adding the last two equations gives 

a + ^/^ + C^ + C = y1 + y + Cf + Cy = {^ + CW + y), 

so 

T{d) + a = + Ciy" + y) 

C_ 
i + C 

c 



= C' + -^(a + V^ + C' + C) 



— (a + ^/a) 



and 



1 + C 

c c 

Writing f{X) := Xif{X)/{T{X) + we have 



a + 1 "V(T(5)+q)2 



1 + C (1 + C)(V^+1) ^ e{a^ + a) 
'■±k^ + t(5 + 1) 

1+C (i+c)(x^^+i) ^ 



1 + C ^(i + C)(v^ + i) ~c 

_ a + C\/a + \fa.{y/a. + C) 

" TTc ' 

so = and thus /((5) = 0, which completes the proof. 
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Remark. The above proof is not completely satisfying, since it is a verifi- 
cation that f{X) has the desired property, rather than a derivation of the 
simple expression for f{X). We do not have a good explanation why the 
polynomial in Theorem 18.11 can be written in such a simple form. 

We conclude the paper by proving the results stated in the introduction. 

Proof of Theorem \l.^ In case k is perfect, the result follows from Theo- 
rem [8T] and Theorem 111.11 For general k, let k denote the perfect closure 
of k. Let / G k[X] satisfy properties (i) and (ii) of Theorem 11.21 Then / 
satisfies the same properties over the perfect field k, so / is ^-equivalent to 
fa for some a £ k\¥2- We will show that this implies / is /c-equivalent 
to fa, and that a £ k. Since the monodromy groups of / over k are the 
same as those over k, indecomposability and exceptionality of / over k are 
equivalent to the corresponding properties over k. Since k n¥q = k OFq 
(because Fg/F2 is separable), the result follows. 

It remains to prove that if f{X) := 6 + r]fa{CX + 7) is in k[X], where 
(5, r], a, ^ k with r]( ^ and a ^ F2, then 5, r/, a, (, 7 are in k. The terms 
of fa{X) of degree at least (g^ - 3q)/2 are T(X)X('?'-29)/2 + aX('?'-39+2)/2 
and (if q = A) {a + l)X^. Hence the coefficients of X'?'/2-g+2 ^nd X^Vs-g+i 
in f{X) are rj^'^ /2-1J+2 /2-q+i ^ since these are in /c*, we must 

have C,?? e k*. The coefficients of x('?'-39+2)/2 and x('?'-29)/2 in f{X) 
are ar/C('''"^^+^^/^ and r/C^^'"^''^/^ ^(7), so q G A;* and ¥(7) G k, whence 
T(7)2 + T(7) = 79 7 is in k. The coefficient of x(9'"3'?)/2 -^^ j^^) is 
j^Q{q ^3(?)/2^^^ _|_ (plus ry(a -|- 1)C^ if g = 4), so 7 is in k. Finally, we 
conclude that 5 = /(O) — ??/a(7) is in k. □ 

Proof of Corollary First assume / G k[X] is a separable indecompos- 
able exceptional polynomial in case (i) of Theorem II. li Then the geometric 
monodromy group G of / is solvable, and the degree d of / is prime and not 
equal to p. By Thm. 4], it follows that / is /c-equivalent to either X'^ or 
Dci{X,l). By |34^ Lemma 1.9], / is fc-equivalent to either X'^ or Dd{X,a) 
with a G k*. These polynomials f{X) are separable and indecomposable. 
We verify exceptionality by examining the factorization of f{X) — f{Y) in 
y], given for instance in [3H Prop. 1.7]. 
Now consider case (iii) of Theorem 11.11 In this case, Corollary 11.31 for 
p = 3 is [20I Thm. 1.3]. So suppose p = 2, and let / G k[X] be a separable 
indecomposable exceptional polynomial of degree d = q{q — l)/2 where q = 
2^ > 2 with e > 1 odd. By Theorem ll.il the arithmetic monodromy group A 
of / is PrL2((?), and thus G has a transitive normal subgroup isomorphic to 
PSL2((j'). The desired result follows from |20^ Thm. 4.3] if k{x)/k[f{x)) has 
no finite branch points, or if the Galois closure E of this extension does not 
have genus {(f' — q) /2. If neither of these conditions hold, then [201 Thm. 2.1] 
implies that G = PSL2((7) and E/k{f{x)) has precisely one finite branch 
point, whose inertia group has order 2 and whose second ramification group 
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is trivial. In particular, / satisfies conditions (i) and (ii) of Theorem II .2^ so 
in this case the result follows from Theorem 11.21 □ 
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